rpm package
almalinux/platform-python-setuptools
pkg:rpm/almalinux/platform-python-setuptools
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-47273 | — | < 39.2.0-9.el8_10 | 39.2.0-9.el8_10 | May 17, 2025 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on | ||
| CVE-2024-6345 | Hig | 8.8 | < 39.2.0-8.el8_10 | 39.2.0-8.el8_10 | Jul 15, 2024 | A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti | |
| CVE-2022-40897 | — | < 39.2.0-6.el8_7.1 | 39.2.0-6.el8_7.1 | Dec 22, 2022 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. |
- CVE-2025-47273May 17, 2025affected < 39.2.0-9.el8_10fixed 39.2.0-9.el8_10
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on
- affected < 39.2.0-8.el8_10fixed 39.2.0-8.el8_10
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti
- CVE-2022-40897Dec 22, 2022affected < 39.2.0-6.el8_7.1fixed 39.2.0-6.el8_7.1
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.